Obs/bin/GMA/Monitoring/Agent/initconfig/2.0/Standard/AzSecMdsAntimalware.xml
<?xml version="1.0" encoding="utf-8"?>
<MonitoringManagement version="1.0" timestamp="2023-06-08T00:58:42.4731192Z"> <!-- Autogenerated version comment - DO NOT REMOVE: AzSecPackShipVersion=4.27.0.4 --> <Imports> <Import file="AzSecMdsAntimalwareOffline.xml" forceLocal="true" /> </Imports> <Events> <EventDeclarations storeType="CentralBond"> <!-- Events that are already known to the team --> <Declaration eventName="AsmSysAV" account="AzSecurityStore" /> <!-- Create a few more entries for reserved columns--> <Declaration eventName="AsmSysAVInv" account="AzSecurityStore" /> <Declaration eventName="AsmSysAVAL" account="AzSecurityStore" /> </EventDeclarations> <FileMonitors> <FileWatchItem eventName="AsmSysAvFMEvent" account="AzSecurityStore" storeType="CentralBond" container="azsecsysavfm" /> </FileMonitors> </Events> <EventStreamingAnnotations> <EventStreamingAnnotation name="^AsmSysAV$"> <Cosmos> <Content><![CDATA[<Config />]]></Content> </Cosmos> </EventStreamingAnnotation> <EventStreamingAnnotation name="^AsmSysAVInv$"> <Cosmos> <Content><![CDATA[<Config />]]></Content> </Cosmos> </EventStreamingAnnotation> </EventStreamingAnnotations> </MonitoringManagement> |